L1 Terminal Fault - The Latest Speculative Execution Side Channel Attack

[phoronix]

Phoronix: L1 Terminal Fault - The Latest Speculative Execution Side Channel Attack

Details are still light but a new vulnerability is coming out called the L1 Terminal Fault. It's been described as a "train-wreck" and is another big deal in the security space as the latest speculative side-channel attack vector...

http://www.phoronix.com/scan.php?page=news_item&px=L1-Terminal-Fault

[tildearrow]

At first, by the name I thought you meant it was possible to leak data from a TTY...

Another win for AMD, I guess.

[milkylainen]

The shit fan is blowing pretty hard in Intels face right now...

[davidbepo]

when will this cpu issues stop being discovered? man, at this rate intel processors are going to become abacus and amd ones pocket calculators

[starshipeleven]

...and eventually the wind's force will make Intel collapse...

Not likely. Security-conshious customers are rarer than FSF supporters inside MS.

[starshipeleven]

when will this cpu issues stop being discovered? man, at this rate intel processors are going to become abacus and amd ones pocket calculators

It seems AMD isn't affected. But I'm pretty sure that everyone and their dong will just disable the mitigations because they need performance.

[soulsource]

Edit: Deleted, I wanted to press "Cancel", but hit Post by accident. I should know better than to use a smartphone.

[A.R.A.]

SUSE has their updates and info: https://www.suse.com/c/suse-addresse...l-fault-issue/

[starshipeleven]

Edit: Deleted, I wanted to press "Cancel", but hit Post by accident. I should know better than to use a smartphone.

Yeah, shame on you, on your family, on your friends for doing that.

[tchiwam]

Well, I am a bit rusty on this but one idea would be to hit N cache lines from the new context at the context change making sure there is at least N lines L1 DATA cache to be prefetched, maybe keep a L1 size 0 buffer to zap the rest if it's less than the size. This might even improve performances in some cases with a form of prefetch ?